This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
File:                     rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft (raw, json)
Hash identifier:          nWnNH/vCTK+EKsfcX+Emi+3rWwnoo3lBW2TKIUfGMrs=
Subject key identifier:   EE:53:53:5F:73:D8:5E:84:D4:53:9C:51:4E:FE:69:27:E1:4B:AF:B9
Authority key identifier: AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B
Certificate issuer:       /CN=A914530B/serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
Manifest number:          B8
Signing time:             Fri 05 Dec 2025 04:02:36 +0000
Manifest this update:     Fri 05 Dec 2025 04:02:35 +0000
Manifest next update:     Fri 12 Dec 2025 04:02:35 +0000
Files and hashes:         1: rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl (hash: kUcqHTu5oj6M7SZrrUBJN7RPHqKwHDx5T3Cpr+uXc1M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl
                          rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914530B, serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
        Validity
            Not Before: Dec  5 04:02:35 2025 GMT
            Not After : Dec 12 04:02:35 2025 GMT
        Subject: CN=6932595b-d89a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d3:81:92:2d:e6:84:d8:ae:fd:87:fd:c3:37:
                    ec:76:89:cf:69:06:91:67:a7:a9:7b:dd:43:1e:aa:
                    0c:0f:5f:42:a0:b9:5a:42:00:4b:01:7d:60:4f:e4:
                    a4:08:9a:d9:af:3d:e4:64:3a:8b:66:37:68:af:6e:
                    b7:ab:a2:dd:1a:78:98:31:07:c7:8b:20:3e:bd:44:
                    6d:9b:10:04:29:0a:fb:a8:78:92:61:fc:1d:4f:02:
                    8f:cf:90:25:4e:78:05:81:63:77:82:12:4e:28:d1:
                    7f:eb:67:77:b3:ea:34:1c:e1:c9:41:f7:ee:63:97:
                    87:61:58:02:95:c5:0c:5f:bf:0b:06:53:97:36:fe:
                    94:fe:77:93:7c:75:1f:28:79:4d:d4:00:36:fa:20:
                    6a:ab:53:ed:4f:ce:ee:7b:89:6e:24:ca:20:1d:55:
                    2d:6e:bc:4a:ec:cd:4b:16:ae:89:34:f8:30:9c:30:
                    cf:6a:99:f2:eb:3f:34:04:4e:a3:f9:e9:c6:a7:94:
                    f7:59:da:8f:70:62:fb:66:cf:28:3b:20:a9:81:81:
                    0f:9c:27:26:4b:01:b7:45:99:1a:19:80:93:bb:34:
                    08:70:b0:e3:82:fd:97:4a:23:cf:2b:2d:c5:ae:54:
                    1d:99:24:cc:d2:12:c5:a1:e1:7d:88:4c:dc:99:52:
                    9f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:53:53:5F:73:D8:5E:84:D4:53:9C:51:4E:FE:69:27:E1:4B:AF:B9
            X509v3 Authority Key Identifier:
                keyid:AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:87:2a:86:aa:a3:95:5e:70:9a:2f:d7:3a:2c:5e:de:cf:36:
         f3:2b:57:20:74:bb:b5:ce:c0:b2:00:7d:ca:82:25:97:43:6a:
         54:55:11:22:3a:79:a5:ad:01:89:88:c6:eb:ef:10:41:c3:4a:
         6b:15:8d:93:44:29:91:5d:b8:b7:ff:1e:ad:aa:fc:b0:79:23:
         4b:87:75:ab:37:c9:2e:46:f3:c8:49:cc:80:c2:1a:3c:da:19:
         ea:00:6d:0a:dc:ac:98:fb:21:68:8e:d4:cd:be:ef:bd:cd:6d:
         0d:dc:36:8d:04:b0:85:1b:71:88:7d:4f:b9:b5:d7:fa:2b:3a:
         67:a6:f1:36:8a:67:fd:fa:4e:72:ef:01:20:ff:87:f6:9a:95:
         38:44:7d:ad:4f:33:24:98:76:39:99:fe:c0:6d:b2:09:6f:f3:
         ba:55:03:43:29:4e:86:10:37:60:e4:c6:ed:fa:6e:2a:ae:7a:
         03:ec:ed:32:cf:95:f6:e6:1f:0e:d2:19:15:49:a5:71:69:2d:
         cc:b1:e1:2f:26:c7:27:06:38:c7:35:6f:9a:ad:91:65:56:2b:
         50:53:e4:ab:77:90:15:2d:04:98:37:ac:06:97:df:6d:ab:51:
         e5:68:3a:ad:f7:18:0b:fc:28:64:2f:c2:0a:89:42:89:10:0f:
         fa:39:1e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:56:59 2025 by rpki-client